Re:The bumpy road towards iPhone 5c NAND mirroring
by MichaelGG on Friday September 16, 2016 @12:18AM
(#12511785)
I think this is provably false. The post to HN was flagged and people told the guy off. It's probably safe to assume several of those people have "slight" technical background.
Re:The bumpy road towards iPhone 5c NAND mirroring
by bogomipz on Friday September 16, 2016 @01:47AM
(#12512096)
Can you explain how the "USB DMA exploit" works? Also how would you run this exploit on the phone if you were locked out of it?
Re:The bumpy road towards iPhone 5c NAND mirroring
by dogma1138 on Saturday September 17, 2016 @12:43AM
(#12519160)
Like any other DMA exploit through the USB host or any other DMA enabled data connector/port.
Cellebrite has a few of them I know of a few for MediaTek chipsets that work through the USB host and the camera connector.
This isn't any different than the DMA "skeleton keys" for PCs and Macs that work via firewire/thunderbolt/pcie/expresscard/PCMCIA etc.
Also while NAND mirroring does work, there is a good chance it wasn't used in that case, the current "theory" is that one of the patched USB DMA exploits were used to unlock the phone, NAND mirroring was too "risky" for the FBI to consider at the time, and it wasn't forensically secure IIRC one of the reasons for the very high price was the non-physical attack approach that the 3rd party provider they've selected had in their toolkit.